| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:script-security | < 1.18.1 | 1.18.1 |
| script security | = 1.0= 1.1= 1.10= 1.11= 1.12= 1.13= 1.14= 1.15= 1.16= 1.17= 1.18= 1.2= 1.3= 1.4= 1.5= 1.6= 1.7= 1.8= 1.9 |
The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free